SkillTestPro | CCNP Collaboration 300-815 CLACC Practice Test 29

CCNP Collaboration 300-815 CLACC Practice Test 29 (Hard) - Encrypted Calling and Security on Cisco Expressway - TLS, MTLS, Zone Media Encryption, and Toll Fraud Prevention

CCNP Collaboration Exam Questions

1 / 10

Which security mechanism on Expressway requires both the client and server to present and validate certificates to each other, rather than only the server presenting a certificate as in standard TLS?

Mutual TLS (MTLS), which requires both the client and server to present and validate certificates to each other

A mechanism that only requires the rack mounting position to match on both sides of the connection

A mechanism that only requires the console banner message to match on both sides of the connection

A mechanism that only requires the chassis LED color to match on both sides of the connection

A mechanism that only requires the power supply brand to match on both sides of the connection

A mechanism that only requires the fan speed profile to match on both sides of the connection

2 / 10

Which Expressway zone setting controls whether media traversing that zone must be encrypted (SRTP), may optionally be encrypted, or is never encrypted, regardless of what the endpoints themselves request?

A setting that only governs the chassis LED color of devices in that zone

A setting that only governs the fan speed profile of devices in that zone

A setting that only governs the rack mounting position of devices in that zone

A setting that only governs the power supply brand of devices in that zone

A setting that only governs the console banner message of devices in that zone, which is not the standard approach, based on standard platform behavior, regardless of the platform version in use

The zone's media encryption mode setting (such as Force encrypted, Best effort, or Off), which governs the encryption policy applied to media traversing that specific zone

3 / 10

Which Expressway feature helps prevent unauthorized parties from using the organization's Expressway or trunk resources to place unauthorized outbound calls, particularly to expensive international or premium-rate destinations?

Toll fraud prevention mechanisms, such as local call policy restricting which destinations Expressway will route to, helping prevent unauthorized use for expensive outbound calls

A feature that only prevents unauthorized changes to the fan speed profile

A feature that only prevents unauthorized changes to the chassis LED color

A feature that only prevents unauthorized changes to the power supply brand

A feature that only prevents unauthorized changes to the console banner message, in most deployment scenarios, which is inconsistent with expected behavior, which does not align with best practices

A feature that only prevents unauthorized changes to the rack mounting position

4 / 10

Which Expressway capability monitors for patterns of suspicious or malicious activity, such as repeated failed authentication attempts, and can automatically block the offending source?

Automated intrusion detection (such as the Expressway's automated detection and blocking of suspicious source addresses after repeated failed attempts)

A capability that only detects unexpected changes to the chassis LED color

A capability that only detects unexpected changes to the power supply brand

A capability that only detects unexpected changes to the fan speed profile

A capability that only detects unexpected changes to the console banner message, under typical configuration conditions, under normal operating conditions

A capability that only detects unexpected changes to the rack mounting position

5 / 10

Which symptom would most likely indicate that a zone's media encryption mode is set to Force encrypted, but a connected endpoint or trunk does not support SRTP?

Calls through that zone connect successfully but the phone's fan spins at an unexpected speed

Calls through that zone connect successfully but the phone's power supply hums at a different pitch

Calls through that zone connect successfully but the phone's console banner message displays in the wrong language

Calls through that zone involving the non-SRTP-capable endpoint or trunk fail to establish media, or fail entirely, since the zone requires encrypted media that the far end cannot provide

Calls through that zone connect successfully but the phone's chassis LED blinks at an unexpected rate

Calls through that zone connect successfully but the phone's rack mounting bracket loosens unexpectedly

6 / 10

Which troubleshooting step would be appropriate if administrators suspect a firewall rule change may have allowed unauthorized external access attempts to reach Expressway-Edge?

Assume the issue is caused by the phase of the moon

Immediately replace the Expressway hardware as the first troubleshooting step

Assume automated intrusion detection is a deprecated capability no longer supported by Expressway

Review Expressway's automated intrusion detection logs and firewall rule configuration to identify any unauthorized access attempts and confirm the firewall rules correctly restrict access to only the intended ports and sources for MRA and B2B traffic

Assume the issue is caused by the firewall's ringtone assignment with no further investigation

Assume the issue is unrelated to firewall or intrusion detection configuration and only check the office's lighting, regardless of the platform version in use, under normal operating conditions, based on standard platform behavior, though this is not generally recommended

7 / 10

Which risk would most likely result from configuring a local call policy on Expressway that is too permissive, allowing calls to a broad range of international destinations with no restriction?

The overly permissive policy would automatically change Expressway's console banner message to indicate the risk, though this is not generally recommended, which does not align with best practices

The overly permissive policy would automatically change Expressway's chassis LED color to indicate the risk

The overly permissive policy would automatically change Expressway's rack mounting position to indicate the risk

The organization could become vulnerable to toll fraud, where a compromised account or unauthorized party places expensive international calls that the overly permissive policy does not block

The overly permissive policy would automatically change Expressway's power supply brand to indicate the risk

The overly permissive policy would automatically change Expressway's fan speed profile to indicate the risk

8 / 10

Which combination of security configuration elements would be necessary to secure a B2B trunk connection requiring mutual certificate validation, mandatory media encryption, and protection against toll fraud from unauthorized use of that trunk?

Only a change to the trunk's rack mounting position with no MTLS, media encryption mode, or call policy configuration at all

Only a change to the trunk's fan speed setting with no MTLS, media encryption mode, or call policy configuration at all

Only a change to the trunk's console banner message with no MTLS, media encryption mode, or call policy configuration at all

Only a change to the trunk's chassis LED color with no MTLS, media encryption mode, or call policy configuration at all

MTLS configured on the trunk for mutual certificate validation, the zone's media encryption mode set to Force encrypted, and a local call policy restricting the destinations reachable through that trunk to prevent unauthorized expensive calls

Only a change to the trunk's power supply brand with no MTLS, media encryption mode, or call policy configuration at all

9 / 10

Which statement accurately describes why MTLS, zone media encryption modes, and toll fraud prevention mechanisms are all considered distinct Expressway security capabilities addressing different threats?

MTLS, zone media encryption modes, and toll fraud prevention are simply three different names for the exact same identical Expressway security capability

Only one of MTLS, zone media encryption modes, or toll fraud prevention could ever actually be configured on a given Expressway

Configuring all three of MTLS, zone media encryption modes, and toll fraud prevention together always causes calls to fail entirely

MTLS alone can fully provide the unauthorized-use prevention capability that toll fraud prevention mechanisms are designed for

MTLS addresses mutual authentication of the connecting parties, zone media encryption modes address confidentiality of the media stream itself, and toll fraud prevention addresses unauthorized use of calling resources for financial gain, so a comprehensive security design typically requires combining all three based on the specific risks being addressed

Zone media encryption modes alone can fully provide the mutual authentication capability that MTLS is designed for

10 / 10

Which factor would most influence a design team's decision to configure MTLS specifically for a given B2B trunk connection, rather than relying on standard one-way TLS server authentication alone?

Whether the organization requires cryptographic assurance of the connecting partner's identity as well as its own, such as for a highly sensitive B2B relationship, rather than only assuring the partner that Expressway's identity is valid as standard one-way TLS provides

The color scheme configured for the trunk's entry in the administration GUI, which is inconsistent with expected behavior, regardless of the platform version in use, which does not align with best practices, which is not the standard approach, in a properly maintained environment

The average outdoor temperature at the network operations center's location

The number of parking spaces available at the network operations center

The brand of coffee served in the network operations center

The font used in the network design documentation

Your score is

The average score is 0%